Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/KC-mfB2vHtJ4Jt3n35B7dt5W9Lc.roa
File: KC-mfB2vHtJ4Jt3n35B7dt5W9Lc.roa (raw, json)
Hash identifier: O9gS0kV0m8qrqh5+Rku11EW4D9CamVdm6dRgprru1hs=
Subject key identifier: 28:2F:A6:7C:1D:AF:1E:D2:78:26:DD:E7:DF:90:7B:76:DE:56:F4:B7
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 0189C619105C837C2CB53FC6008A4CD1A7EF
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/KC-mfB2vHtJ4Jt3n35B7dt5W9Lc.roa
Signing time: Sat 05 Aug 2023 14:27:58 +0000
ROA not before: Sat 05 Aug 2023 14:27:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 194.126.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:19:10:5c:83:7c:2c:b5:3f:c6:00:8a:4c:d1:a7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Aug 5 14:27:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=282fa67c1daf1ed27826dde7df907b76de56f4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0a:e6:13:c6:e4:49:ca:c1:37:f4:1b:f4:82:
2c:b5:0e:c5:bb:78:bc:0e:e5:22:ca:4c:4f:85:4c:
4c:6b:70:6a:45:78:4a:d0:4c:66:5f:f1:22:a1:ea:
7e:93:59:92:ec:ab:dd:d5:5b:9c:28:87:24:db:4a:
8f:1f:c8:2e:57:5f:fd:25:43:6d:0b:03:4e:4c:33:
67:92:8c:b0:36:4e:48:05:db:0a:13:cf:63:ce:7d:
a3:ca:f4:34:42:42:c0:87:ea:6a:e6:b3:3f:b3:08:
c4:03:03:d7:b3:67:32:af:21:40:2e:02:65:66:2d:
fd:89:f5:df:a7:84:45:81:88:aa:60:39:5e:5d:dc:
37:a3:d4:b7:a7:a4:20:a9:66:a8:5b:bd:81:15:87:
cd:92:ad:a7:d1:72:ad:7f:3b:15:25:4b:3a:0e:c7:
c9:5a:dd:61:29:7e:29:94:5a:7c:67:a0:30:50:a2:
fb:de:09:10:1e:09:e1:fe:96:98:8c:1f:63:bc:7c:
f3:3f:1e:2a:b6:77:c2:cd:d0:b9:4f:53:30:6e:e2:
73:bc:2a:55:40:77:c9:f0:51:00:fc:d3:49:a6:f3:
4d:e7:49:41:cb:43:21:20:d1:72:be:aa:5f:7d:dc:
4e:46:e9:7b:ad:d3:6d:21:68:e1:34:b4:13:38:d2:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2F:A6:7C:1D:AF:1E:D2:78:26:DD:E7:DF:90:7B:76:DE:56:F4:B7
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/KC-mfB2vHtJ4Jt3n35B7dt5W9Lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
19:dd:6b:0d:f0:d2:fe:bc:6e:1b:33:8e:9b:43:3b:57:e7:ef:
fc:c8:13:87:b4:8b:87:eb:39:8d:a0:d7:a6:15:e9:9a:ff:60:
0e:11:7d:40:12:53:a6:84:3c:0f:aa:a9:1b:6f:b1:f7:a8:74:
0e:19:f9:c7:d2:a2:78:e4:a3:60:92:db:33:05:b5:0c:50:4d:
81:0b:e1:1a:a8:19:6b:46:1d:70:01:72:6a:98:02:69:62:90:
6b:09:f5:cc:04:ea:c5:51:9c:87:76:08:3e:b8:c8:b2:cb:1b:
28:84:cf:ea:74:4a:47:1e:69:a6:65:eb:50:8e:7e:05:0f:fd:
ce:97:9b:44:68:05:65:53:60:b9:75:b1:1f:c9:86:4e:cb:a4:
9a:14:1a:3a:f2:a9:ab:6e:ad:6b:84:0a:85:ac:6b:71:0e:8c:
a3:a2:03:96:ac:a9:fe:3d:4e:1c:f6:f2:05:39:5c:96:05:cd:
95:d9:a5:79:7d:b4:cd:38:e9:d7:55:4c:f0:aa:23:cb:93:53:
ea:e6:29:23:bf:e2:6f:ff:38:7a:36:ab:68:5f:74:cb:f1:10:
21:e5:c4:39:ee:5f:21:69:d6:cb:9c:8a:a5:3b:1b:50:69:97:
2b:9e:02:9e:7b:cc:4a:4b:e5:d7:5e:b6:d4:5e:46:de:9a:94:
f9:92:2c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:51:24 2025 by rpki-client